CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Linux. It may be remotely exploitable.
CVE
CVE-2017-15865
Severity
HIGH
CVSS
7.5
EPSS
2.49%
Linux
Original NVD Description
bgpd in FRRouting (FRR) before 2.0.2 and 3.x before 3.0.2, as used in Cumulus Linux before 3.4.3 and other products, allows remote attackers to obtain sensitive information via a malformed BGP UPDATE packet from a connected peer, which triggers transmission of up to a few thousand unintended bytes because of a mishandled attribute length, aka RN-690 (CM-18492).
Related CVEs
Other vulnerabilities affecting the same vendor(s)